AMENDMENTS TO THE CLAIMS 



1. (Previously presented) A computerized method of conducting a survey, said method 
comprising: 

establishing, for at least one question in said survey, a bin, as represented in a 
memory of a computer, for each of a possible response to said question; and 

establishing, for each said bin, a perturbing mechanism, executed by a processor 
on said computer, that perturbs a content of said bin, said perturbing mechanism having a 
statistical parameter with a known value. 

2-27. (Canceled) 

28. (Previously presented) The method of claim 1, further comprising generating, using 
said processor, a perturbed indicator vector that represents a respondent's response for 
said question, said perturbed indicator vector comprising an information structure 
including the contents of all bins of said question after said respondent has selected one 
or more of said possible responses and each of the bins has been perturbed. 

29. (Previously presented) The method of claim 1, wherein said perturbing mechanism 
comprises a random number generator executed by said processor and said known 
statistical parameter value comprises a mean value of said random number generator. 
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30. (Previously presented) The method of claim 28, wherein said generating the 
perturbed indicator vector comprises respectively adding numbers from the perturbing 
mechanism to the contents of the bins. 

31. (Previously presented) The method of claim 30, further comprising: 

if contents of a bin exceeds an upper bound after perturbation, said contents are 
clamped to said upper bound. 

32. (Previously presented) The method of claim 30, further comprising: 

if contents of a bins are below a lower bound after perturbation, said contents are 
clamped to said lower bound. 

33. (Previously presented) The method of claim 1, further comprising at least one of: 

setting up a survey question by generating a medium with a plurality of markable 
areas for each possible response and pre-marking a random number of said markable 
areas for each said possible response; and 

having a respondent respond to the survey question by adding a mark to any of 
remaining non pre-marked markable areas, if any markable areas remain after said pre- 
marking, of the plurality of markable areas for the possible response that corresponds to a 
desired response to the question. 
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34. (Previously presented) The method of claim 33, further comprising: 

generating a perturbed indicator vector by counting a number of marked areas for 
each response. 

35. (Previously presented) The method of claim 28, further comprising: 

for a plurality of responses for a question in said survey, using a processor to 
analyze the bins in said perturbed indicator vector to provide an estimation of a 
distribution of responses. 

36. (Previously presented) The method of claim 35, wherein said analyzing comprises: 

for said question being analyzed, calculating an average of each perturbed bin in 
said question. 

37. (Previously presented) The method of claim 36, wherein said perturbing mechanism 
comprises a random number generator and said known statistical parameter comprises a 
mean value, said analyzing further comprising: 

for each said perturbed bin in said question, subtracting said mean value of said 
perturbing mechanism associated with said bin. 

38. (Previously presented) The method of claim 1, further comprising: 

for each perturbed bin in said question, adjusting a content of said perturbed bin 
by an amount of said known value of said statistical parameter. 
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39. (Previously presented) An apparatus for conducting a survey, said apparatus 
comprising at least one of: 

a memory for storing a plurality of respondents' responses to a question in said 
survey, wherein each of said respondents' response comprises a bin for each of a possible 
response to said question and a value of each said bin has been perturbed by a perturbing 
mechanism; 

a survey question set-up module executed by a processor on said apparatus, to 
allow a question in said survey to be set up, said survey question set-up module including 
a module to establish a bin for each of a possible response to said question and a 
perturbing mechanism for each said bin that perturbs a content of said bin, each said 
perturbing mechanism having a known value for a statistical parameter; 

a respondent module executed by said processor, including a selection module to 
allow a respondent to select at least one of said possible responses to said question and a 
module to apply said perturbing mechanism for each said bin to generate a perturbed 
indicator vector corresponding to said respondent's selection; 

an analysis module executed by said processor, to retrieve data from said database 
for said question and to analyze each said bin; and 

a graphic user interface executed by said processor, to allow a user to interface 
with at least one of said memory, said survey question set-up module, said respondent 
module, and said analysis module. 

40. (Previously presented) The apparatus of claim 39, wherein said processor causes 

said memory to store a running sum of the perturbed indicator vectors. 
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41. (Previously presented) The apparatus of claim 39, wherein said analysis module 
calculates an average value of each said bin of said question by dividing a sum of the 
contents in said bin of the perturbed indicator vectors by a number of respondents. 

42. (Previously presented) A system for conducting a survey, comprising at least one of: 

a memory means for serving as a database to store a plurality of respondent' s 
responses to a question in said survey, wherein each said response comprises a plurality 
of bins corresponding to a number of possible answers for said question and each said bin 
is perturbed in value by a perturbing mechanism; 

a survey set-up means for setting up a question in said survey, wherein said 
setting up said question comprises establishing a bin for each of a possible response to 
said question and establishing a perturbing mechanism that perturbs a content of said bin, 
said perturbing mechanism having a statistical parameter with a known value; 

a respondent means for allowing a respondent to select at least one of said 
possible answers to said question, for perturbing a content of each bin in said question 
upon completion of the selection by said respondent, for generating a perturbed indicator 
vector that includes the contents of all said bins in said question after perturbation, and 
for transmitting said perturbed indicator vector to said database; and 

an analysis means for retrieving and analyzing a content of said bins; and 

a user interface means for allowing a user to interface with at least one of said 
memory means, said survey set-up means, said respondent means, and said analysis 
means. 
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43. (Previously presented) A system for conducting a survey as in claim 42, wherein 
said memory means stores a running sum of the perturbed indicator vectors. 

44. (Previously presented) A system for conducting a survey as in claim 42, wherein 
said analysis means calculates an average value for said bin by dividing, by a number of 
respondents being analyzed, the sum of the contents of said bin for all said respondents 
being analyzed. 

45. (Currently amended) A tangible signal-bearing storage medium tangibly embodying 
a program of machine-readable instructions executable by a digital processing apparatus 
to perform a method of at least one of conducting, processing, and analyzing a survey, 
said program comprising at least one of: 

a memory interface , as executed by a processor on a computer, to interface with a 
database that stores a plurality of responses to a question in said survey, wherein each 
said response comprises a perturbed vector comprising a bin for each of a possible 
response for said question, as perturbed by a perturbing mechanism having a known 
value for a statistical parameter; 

a survey set-up module , as executed by a processor on said computer, to allow a 
question in said survey to be set up, wherein said set-up module establishes a bin for each 
of a possible response to said question, and establishes a perturbing mechanism to perturb 
a content of said bin, said perturbing mechanism having a known value for a statistical 
parameter; 
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a respondent module , as executed by a processor on said computer, to allow a 
respondent to select at least one of said possible responses to said question, to perturb a 
content of each bin in said question upon completion of the selection, to generate a 
perturbed indicator vector that includes the contents of all said bins in said question after 
perturbation, and to send said perturbed indicator vector to said database; 

an analysis module , as executed by a processor on said computer, to retrieve from 
said database and analyze data for said question; and 

a graphic user interface , as executed by a processor on said computer, to allow a 
user to interface with at least one of said memory device, said survey set-up module, said 
respondent module, and said analysis module. 

46. (Previously presented) The signal-bearing storage medium of claim 45, wherein said 
memory interface includes instructions to store a running sum of the perturbed indicator 
vectors. 

47. (Previously presented) The signal-bearing storage medium of claim 46, wherein said 
analysis module calculates an average value by dividing the sum of the contents of a bin 
of said perturbed indicator vectors by a number of respondents being analyzed. 

48. (Currently amended) A method of conducting a survey, said method comprising: 

for at least one question in said survey, generating , using a processor on a 
computer, an indicator vector from a vector whose components respectively represent all 
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possible responses to said question, said indicator vector indicating which of said 
possible responses were selected by a respondent; and 

adding a perturbation vector to said indicator vector to provide a perturbed 
indicator vector, 

said perturbation vector having a same number of components as said indicator 
vector, each component in said perturbation vector resulting from a perturbation 
mechanism that is independent of the perturbation mechanism of the other components, 
wherein said perturbation mechanism has a statistical parameter whose value is known. 

49. (Previously presented) The method of claim 48, wherein said perturbation 
mechanism comprises a random number generator and said statistical parameter 
comprises a mean, said method further comprising: 

for each at least one question in said survey, calculating an average perturbed 
indicator vector from a plurality N of perturbed indicator vectors, wherein vector 
components of said average perturbed indicator vector respectively comprise an average 
value of corresponding components in said plurality N of perturbed indicator vectors; and 

subtracting from said average perturbed indicator vector a mean vector whose 
components respectively comprise said mean value of said perturbation mechanism for 
each said indicator vector component. 

50. (Currently amended) A method of privacy-preserving data mining, comprising: 

for at least one question in a survey used in said data mining, generating , using a 

processor on a computer, an indicator vector from a vector whose components 
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respectively represent one of each possible response to said question, said indicator 
vector indicating which of said possible responses were selected by a respondent; and 

adding a perturbation vector to said indicator vector to provide a perturbed 
indicator vector, said perturbation vector having a same number of components as said 
indicator vector, each component in said perturbation vector resulting from a perturbation 
mechanism that is independent of the perturbation mechanism of the other components, 
wherein each said perturbation mechanism has a statistical parameter with a value that is 
known. 

51. (Currently amended) A data mining apparatus, comprising: 

an indicator vector generator to generate that generates an indicator vector 

representing a response by a respondent to a survey question; 

a perturbation vector generator to generate that generates a perturbation vector; 

and 

a perturbed indicator vector generator to add that adds said indicator vector with 
said perturbation vector, 

wherein, for said question, a predefined possible-response vector exists whose 
components respectively represent a possible response to said question, said indicator 
vector comprising a modification of said possible-response vector that represents which 
one or ones of said possible responses were selected by a respondent, said perturbation 
vector comprising a vector having a same number of components as said indicator vector, 
each component in said perturbation vector resulting from a perturbation mechanism that 
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is independent of the perturbation mechanism of the other components, each said 
perturbation mechanism having a statistical parameter with a value that is known. 

52. (Currently amended) A tangible signal-bearing storage medium tangibly embodying 
a program of machine -readable instructions executable by a digital processing apparatus 
to perform a method of conducting a survey, said program comprising: 

an indicator vector generator , as executed by a processor on a computer, to 
generate an indicator vector representing a response by a respondent to a survey question; 

a perturbation vector generato r, as executed by a processor on said computer, to 
generate a perturbation vector; and 

a perturbed indicator vector generato r, as executed by a processor on to computer, 
to combine said indicator vector with said perturbation vector, 

wherein, for each said question, a possible-response vector exists whose 
components respectively represent a possible response to said question, said indicator 
vector comprising a modification of said possible-response vector that represents which 
of said possible responses were selected by a respondent, said perturbation vector 
comprising a vector having a same number of components as said indicator vector, each 
component in said perturbation vector resulting from a perturbation mechanism that is 
independent of the perturbation mechanism of the other components, each perturbation 
mechanism having a statistical parameter with a known value. 
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